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IN THE CLAIMS: 

Kindly cancel claim 4 without prejudice and amend the claims as follows: 

l 1 . (Original) A layer 2 switch, comprising: 

2 

3 a plurality of ports, at least one port of said plurality of ports capable of being set 

4 to a status of root guard protected (RG status); 

5 

6 first circuits for running the spanning tree protocol (STP) in said layer 2 switch, 

7 said STP capable of selecting said at least one port as either a designated port or as a root 

8 port; 

9 

10 second circuits for running root guard protocol, and said root guard protocol de- 

i i termining whether or not a port set to RG status has been selected by STP as a root port; 

12 and, 

13 

14 blocking circuits to set said at least one port into blocked status, said blocking cir- 

15 cuits setting said at least one port into blocked status in response to said at least one port 

16 being both in root guard protected status and selected by STP as a root port. 



1 2. (Original) A method of managing a switch for use in a computer network, 

2 comprising: 

3 

4 providing a plurality of ports, at least one port of said plurality of ports capable of 

5 being set to a status of root guard protected (RG status); 

6 

7 setting said at least one port to RG status; 
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8 

9 running a spanning tree protocol (STP) in said switch, said STP capable of se- 

10 lecting said at least one port as either a designated port or as a root port; 
n 

12 running root guard protocol, and said root guard protocol determining whether or 

13 not a port set to RG status has been selected by STP as a root port; and, 

14 

is setting said at least one port into blocked status, in response to said at least one 

16 port being both in root guard protected status and selected by STP as a root port. 

1 3. (Original) A method of managing a switch for use in a computer network, 

2 comprising: 

3 

4 providing a plurality of ports, at least one port of said plurality of ports capable of 

5 being set to a status of root guard protected (RG status); 

6 

7 setting said at least one port to RG status; 

8 

9 running a spanning tree protocol (STP) in said switch, said STP capable of se- 

10 lecting said at least one port as either a designated port or as a root port; 
n 

12 determining whether or not said at least one port set to RG status has been se- 

13 lected by STP as a root port; 

14 

15 setting said at least one port into blocked status in response to said at least one 

16 port being both in root guard protected status and selected by STP as a root port. 

i 4. (Canceled) 
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1 5. (Currently amended) A computer network having a core network and a plurality 

2 of customer networks connected thereto by a perimeter port of a perimeter switch in said 

3 core network , said perimeter port being connected to a port of a switch in a customer 

4 network of the plurality of customer networks, said computer network comprising: 

5 

6 a first process for setting said perimeter port to a status of root guard protected 

7 (RG status); 

8 

9 a second process for running the spanning tree protocol (STP) in said perimeter 

10 switch, said STP capable of selecting said perimeter port as either a designated port or as 
n a root port; 

12 

n a third process for executing a root guard protocol, said root guard protocol de- 

14 termining whether or not a port set to RG status has been selected by STP as a root port; 

is and, 

16 

17 a fourth process for blocking circuits to s e t said p e rim e t e r port into block e d status 

is said blocking circuits setting said perimeter port into blocked status in response to said 

19 perimeter port being both in root guard protected status and selected by STP as a root 

20 port. 



l 6. (Currently amended) M e ans for op e rating a ^ A_computer network, comprising: 

2 

3 means for establishing said computer network as having a core network and a plu- 

4 rality of customer networks connected thereto by a perimeter port of a perimeter switch in 

5 said core networ k, said perimeter port being connected to a port of a switch in a customer 

6 network of the plurality of customer networks; 

6 



PATENTS 
112025-0198 
Seq. No. 1912 



7 

8 means for setting said perimeter port to a status of root guard protected (RG 

9 status); 

10 

1 1 means for running the spanning tree protocol (STP) in said perimeter switch, said 

12 STP capable of selecting said perimeter port as either a designated port or as a root port; 

13 

14 means for executing a root guard protocol, said root guard protocol determining 

is whether or not a port set to RG status has been selected by STP as a root port; and, 

16 

n means for setting said perimeter port into blocked status in response to said pe- 

ls rimeter port being both in root guard protected status and selected by STP as a root port. 



1 7. (Original) A method for operating a computer network switch, said computer 

2 network switch having a perimeter port connected to a second switch, comprising: 

3 

4 setting said perimeter port to a status of root guard protected (RG status); 

5 

6 running a spanning tree protocol (STP) in said computer network switch, said 

7 STP capable of selecting said perimeter port as either a designated port or as a root port; 

8 

9 executing a root guard protocol, said root guard protocol determining whether or 

10 not a port set to RG status has been selected by STP as a root port; and, 
n 

12 setting said perimeter port into blocked status in response to said perimeter port 

13 being both in root guard protected status and selected by STP as a root port. 



i 



8. (Currently amended) The pfeeess -method of claim 7, further comprising: 
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executing a process in a CPU control engine to set said perimeter port to a status 
of root guard protected; 

executing a process in said CPU control engine to run said spanning tree protocol; 

and, 

executing a process in said CPU control engine to execute said root guard proto- 
col. 

9. (Currently amended) A computer readable memory device, comprising: said 
computer readable memory device containing instructions for execution by a processor 
for practice of the method of claim 7. 

10. (Currently amended) Electromagnetic signals propagated over a computer net- 
work, comprising: said electromagnetic signals having instructions for execution by a 
processor for practice of the method of claim 7. 

Please add the following new claims 1 1-20: 

1 1 . (New) The computer network of claim 5, wherein two or more processes of said 
first process, second process, third process and fourth process is the same process. 

12. (New) A method for operating a switch for use in a computer network, com- 
prising: 

setting at least one port of said switch to root guard protected status (RG status); 

running a spanning tree protocol (STP) capable of selecting said at least one port 
as either a designated port or as a root port; 
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8 determining whether or not a port set to RG status has been selected by STP as a 

9 root port; and, 

10 

1 1 setting said at least one port into blocked status, in response to said at least one 

12 port being both in RG status and selected by STP as a root port. 

1 13. (New) A switch, comprising: 

2 means for setting at least one port of said switch to root guard protected status 

3 (RG status); 

4 

5 means for running a spanning tree protocol (STP) capable of selecting said at least 

6 one port as either a designated port or as a root port; 

7 

8 means for determining whether or not a port set to RG status has been selected by 

9 STP as a root port; and, 

10 

1 1 means for setting said at least one port into blocked status, in response to said at 

12 least one port being both in RG status and selected by STP as a root port. 

1 14. (New) A switch, comprising: 

2 a processor; and 

3 a memory configured to store instructions for execution by said processor, said 

4 instructions for performing the steps of: 

5 setting at least one port of said switch to root guard protected status 

6 (RG status); 

7 running a spanning tree protocol (STP) capable of selecting said at 

8 least one port as either a designated port or as a root port; 
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determining whether or not a port set to RG status has been se- 
lected by STP as a root port; and, 

setting said at least one port into blocked status, in response to said 
at least one port being both in RG status and selected by STP as a root 
port. 

15. (New) The switch of claim 14, wherein said processor resides on a linecard in 
said switch. 

16. (New) The switch of claim 14, wherein said processor resides on a central proc- 
essing unit in said switch. 

17. (New) The switch of claim 14, wherein said memory is located on a linecard in 
said switch. 

1 8. (New) The switch of claim 14, wherein said memory is located in a global mem- 
ory unit in said switch. 

19. (New) A switch, comprising: 

a plurality of ports, at least one port of said plurality of ports capable of being set 
to a status of root guard protected (RG status); 

first circuits for running the spanning tree protocol (STP) in said switch, said STP 
capable of selecting said at least one port as either a designated port or as a root port; 
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second circuits for running root guard protocol, and said root guard protocol de- 
termining whether or not a port set to RG status has been selected by STP as a root port; 
and, 

blocking circuits to set said at least one port into blocked status, said blocking cir- 
cuits setting said at least one port into blocked status in response to said at least one port 
being both in root guard protected status and selected by STP as a root port. 

20. (New) A switch, comprising: 

a memory configured to store a data structure containing one or more entries, said 
entries having a "state" field and a "role" field, said state field having a value of 
"blocked" or a value of "forwarding", said data structure having, 

a first entry having the role field set to "root port" and the state 
field set to forwarding; 

a second entry having the role field set to "designated port" and the 
state field set to forwarding; 

a third entry having the role field set to "blocked port" and the state 
field set to blocked; and, 

a fourth entry having the role field set to "root inconsistent port" 
and the state field set to blocked; and, 
a processor to write and read said data structure in implementing a root guard 
protocol. 
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